c6f3da4a4af76e668b30453c1ebd174070dc758f65834dbaf3142f59d9444a86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6f3da4a4af76e668b30453c1ebd174070dc758f65834dbaf3142f59d9444a86
Size

253KB
MD5

17eed4f26ab051ea22db3a392abe0d30
SHA1

ae303f1a9b0d42ea3328372186c003e2879cd5be
SHA256

c6f3da4a4af76e668b30453c1ebd174070dc758f65834dbaf3142f59d9444a86
SHA512

e133c834b7e89f2bd0b5f62f9652f800738e81a5f323bed6d66718ca72a5c7d69ef25c26bfe9d6f7c5de8076642a323fd5c69d3bbc9dd193edd489b566a31de6
SSDEEP

3072:Jzyk7wh0QddSdSiNEKVvhrMPiJ/ZOkvRYWc8SSK3WPCIr:ZyUwJuSgvhFZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6f3da4a4af76e668b30453c1ebd174070dc758f65834dbaf3142f59d9444a86

Files

c6f3da4a4af76e668b30453c1ebd174070dc758f65834dbaf3142f59d9444a86
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\PROJECT\AlphaHRMS.Net\eAlphaGenMail.NET\obj\Debug\eAlphaGenMail.NET.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ